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[57] ABSTRACT 

To permit, by a program, supervision of a programma- 
ble controller, which controls, for example, operation 
of a machine tool, or other device in which sequential 
events occur, a computer controlled diagnostic unit (2) 
is connected to the programmable controller (1). The 
stepping or sequencing structure of the program in the 
programmable controller (1) is stored in the diagnostic 
unit (2), for example in a fixed memory (ROM 4). Su- 
pervision of the control of the machine tool, engine, or 
other operating unit, for example due to malfunction of 
transducers, connecting lines, and the like, is supervised 
by testing if the conditions for going from one step in a 
program to the next step are always satisfied; if an error 
is recognized, the respective steps of the control pro- 
gram arc interrogated, and the conditions for stepping 
from one step to the next are tested. TTiat one of the 
steps which does not meet the further sequencing condi- 
tions — or the next preceding one which does meet the 
conditions— then provide an indication of the source of 
the error, malfunction or trouble. 

8 Claims, 6 Drawing Figures 
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nized which are contained within the error checking 
METHOD OF DETECTING EXECUTION ERRORS table. 

IN PROGRAM-CONTROLLED APPARATUS The method, as described, thus is time-consuming 

and not unambiguously suitable Tor determining all 
The present invention relates to a method to detect 5 possible errors since those which cannot be foreseen, of 
errors or faults in the execution of steps commanded by course, cannot be included within the diagnostic error 
a control apparatus, such as a programmable controller table. 

(PC), and more particularly to a method to detect errors THE INVENTION 

in execution of sfvecific operating steps to be carried out 

by an industrial apparatus or a machine, such as ma- 10 It is an object to provide an improved method of 
chine tool, and other apparatus and machinery carrying detecting faults in carrying out a sequential program 
out repetitively occurring sequential operating or oper- which is simple and results in a diagnostic arrangement 
ation steps. which is independent of specific programming steps 

bemg carried out. 

BACKGROUND 15 Briefly, the sequencing structure or arrangement of 

Various arrangements and methods of fault diagnosis ^« program to be carried out for sequencing of the 
are known. The publication "Elektronik", issue 25/26 industrial process is stored in the diagnostic apparatus, 
of 1981, in an article by Lawrenz and Timmennann, pp. example m memory therein. The diagnostic appara- 

89-92, describes a method for error diagnosis of indus- "P«>" checkmg for malfunction or errors, interro- 

trial control sequencing which is specifically adapted to ^0 gates each step; if the step is erroneous, for example if its 
decrease down time of machine tools upon malfunction execution takes a time which is in excess of a predeter- 
of an electronic control system therefor. The error mmed time, then the prerequisite conditions for further 
diagnosis, as described in this article, utilizes an error execution arc also checked. 

diagnostic program which tests or checks the mput „ system has the advantage that only the step 

signals and output signals controlling the particular " °J program which controls the machine 

industrial process or sequencing with respect to error or ^"^^^ Other device, need be read mto the diagnostic 
malfunction. The example which is givenl;! this article f^Pf^^^f • The diagnostic apparatus then, itself, can 
describes control of sorting of goods carried on a con- Independently interrogate whichever step which is 
u w u'ujr*' jf «i « bang earned out, and check the conditions for further 
vcyor belt in which defective goods, for example some * - e- *u * . ^ • j t. .t. 

/. , , ^ V I L 1 ^ I. J lu * 1*1 30 steppmg. Since the steppmg structure is fixed when the 

which do not have a label attached thereto or the hke, o v * t 11 * j 

. , . , . 1- r , program for the machine tool, or the like, IS generated, 

are ejected from the normal production line for rework |; necessary to store corresponding addresses in 

or the like. As described, malfunction m a system can ^j^^ diagnostic apparatus. Having the addresses stored in 
anse due to defects not only m the control system as diagnostic apparatus then permits, in accordance 

such, but also in transducers, cabhng mterconnectmg 35 ^^^^^ diagnostic apparatus to recognize 

the transducer, or transducers, and the actual control ^^^^ ^^^^ ^ ^as not been carried out. and to 
apparatus, m relays and winng connected thereto, and ^^^^ j},e conditions for further execution of the main 
the hke. To detect errors, an error diagnosuc program is program. It is not necessary to generate specific error 
provided which actually checks the input and output checking tables, or to look for possible error combina- 
signals, A diagnostic calculator or computer arrange- 40 tions. Consequently, the diagnostic apparatus can 
mcnt is provided which is connected to the control readily be adapted to various programs, and to pro- 
elements, and input/output units over data buses. The grams which arc changing. It is not necessary to addi- 
diagnostic computer apparatus includes an error check- tionally generate a second diagnostic program besides 
ing table, which is applied thereto by the user, in accor- the original control program for the machine, or similar 
dance with the desired operating program of the ma- 45 device or apparatus. 

chine, in the selected example, the determination and in accordance with a preferred feature of the inven- 
ejection of incorrectly labeled or manufactured goods, tion, enor checking is carried out only if the time for 
The error checking table must contain the respective the entire sequencing of control steps of the controlled 
signal combinations, to be derived from and issued by machine or engine or similar device exceeds a certain 
the control apparatus, and which lists all the possible 50 value, rather than engaging in a diagnostic error search 
combinations of permitted and erroneous combinations in more or less regularly recurring intervals. Conse- 
of input and output signals, respectively. quently, it is not necessary that the diagnostic device 

Diagnosis of malfunction in accordance with the continouously supervise the control features of the pri- 
described method is complex. It requires, first, genera- mary control system; rather, it is possible to utilize a 
tion of the program which controls the industrial pro- 55 single diagnostic apparatus to supervise a plurality of 
cess, that is, the stored program relating input and out- control systems or a plurality of control functions in a 
put signals of the particular apparatus or machine which large system. 

is to be controlled; this program, thus, must contain a The control system, based on a program stored in a 
table or memory addresses in which all commanded and memory, operates within the cycling time determined 
permitted signal combinations are contained. For error 60 by the program. Special time periods for diagnostic 
diagnosis, then, it is additionally necessary to provide a checking do not, usually, arise. This is an advantage of 
further table which contains all possible signal combina- this system, since real-time operation can be carried out, 
tions which are not permitted, or are indicative of mal- with diagnosis of errors as well, 
function. It is practically impossible to determine all The system of the present invention permits genera- 
possible combinations of error signals. 63 tion of the stepping structure of the program directly in 
If the basic program is to be changed, even only the diagnostic apparatus upon reading-in of a new pro- 
slightly, it wiU then become necessary to correct the gram or portion of a program into the primary control 
error checking table. Only those errors will be rccog- computer. The method, thus, has the additional and 
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specific advantage that additional work for generating 
an error diagnostic program will not arise even though 
the memory controlled primary control system or com- 
puter is changed, or reprogrammed. The diagnostic 
device, due to its own inherent program, determines the 5 
sequencing of the particular control program of the 
primary control computer, or, rather, the stepping or 
sequencing structure thereof, and can store the rcspcc* 
tive individual steps or characteristics thereof in its own 
memory. In accordance with a preferred feature of the 10 
invention, commands in the primary program which are 
"SET' commands which follow an AND command, 
which logically conjoins the results of another SET 
command, arc stored in the memory of the diagnostic 
computer, or diagnostic apparatus. In case of malfunc- 15 
tion, the fault diagnostic apparatus checks the entire 
stepping or sequencing structure of the primary pro- 
gram with respect to its status. If the step which follows 
a preceding step including a SET command is errone- 
ous, then, in a subsequent operation, the further execu- 20 
tion conditions are checked with respect to proper sig- 
nal conditions at the input to the primary control stored 
program. The fault which has been discovered is indi- 
cated. This preferred form permits particularly simple 
error diagnosis in linear control programs. 25 

With complex control programs, it is desirable, in the 
event of a malfunction, to review the status of each 
instruction. If a step is not SET, despite the fact that the 
SET conditions in the preceding step were satisfied, 
then the conditions for continued execution must be 30 
erroneous. 

The diagnostic apparatus to carry out the method, 
preferably, includes a computer arrangement which 
includes a fixed memory, and an addressable memory. 
The fixed memory conuins the program to retrieve the 35 
stepping structure. The addressable or variable memory 
then stores the structure itself. This arrangement per- 
mits constructing a simple diagnostic apparatus at low 
cost. 

DRAWINGS ^ 

FIG. 1 is a schematic diagram illustrating the inter- 
connection between a programmable controller and a 
diagnostic apparatus; 

FIG. 2 illustrates the architecture of a diagnostic 45 
device in accordance with the invention; 

FIG. 3 is a flowchart of a program for a programma- 
ble controller; 

FIG. 4 illustrates the instruction sequence of a step of 
the program of FIG. 3; 50 

FIG. 5 is a flowchart illustrating how the step struc- 
ture is abstracted by the diagnostic apparatus; and 

FIG. 6 is a flowchart illustrating the process of fault 
searching by the diagnostic apparatus. 

DETAILED DESCRIPTION " 

Many industrial control systems have recently been 
constructed in the form of a programmable controllers 
(PC). Such freely programmable control arrangements 
have the advantage that programming is simple, and 60 
errors upon planning of the control steps and sequenc- 
ing can be easily corrected. Specific hard-wiring, which 
is used in relay connections and the like, is no longer 
necessary. 

Errors and malfunctions may arise even when using 65 
programmed memory control units, which may lead to 
down time of machines^ shut-down of engines, and the 
like. The largest portion of such errors or malfunctions 



occur outside of the control unit as such. Many of the 
malfunctions can be traced to defective cabling, wiring, 
or limit switches and transducers. In order to minimize 
down time, or complete failure of an operation of an 
engine, and thus permit optimal utilization of the con- 
trolled apparatus, machine, engine, or other device, it is 
important that any externally occurring defects, mal- 
functions, faults or errors can be readily recognized, for 
quick repair or removal of the malfunction or defect. 
Contrary to fixed or hard- wired relay circuits, this is not 
readily possible when using PC*s, since it cannot be 
recognized, externally, which one of the transducers, or 
which one of the connecting wires or cables is dam- 
aged, and on which point the program does not con- 
tinue, since, for example, a transducer signal is missing. 
The PC*s can inherently supervise the essential opera- 
lion of associated input and output apparatus, for exam- 
ple supervising cyclical runs, voltage levels, and the 
like. Such supervisory, inherent monitoring, however, 
is not capable of recognizing errors and malfunction 
which occur peripherally with respect to the control 
unit or apparatus itself. 

Malfunction and error which do not occur within the 
PC itself occur only if one or more input signals are not 
properly applied to the control unit. If the operator can 
be alerted to the absence of a particular missing input 
signal, for example by indicating the device from which 
the input signal is defective, then he can, without fur- 
ther knowledge of the sequence and the circuit diagram 
of the unit, readily localize the defects and, frequently, 
can carry out the necessary repair in minimum time. It 
is not necessary to call in a specialist for the computer 
apparatus; the usual machine operator, machinist or 
techician is readily capable of removing interruptions 
himself, so that the down time of the apparatus or en- 
gine can be held to a minimum level. 

The fault error or malfunction must, however, be 
localized. Thus, it is necessary that the PC include diag- 
nostic apparatus which indicates the particular locality 
or nature of the malfunction. The general arrangement 
is illustrated in FIG. 1. 

A programmable controller (PC) 1, as is well known 
in the technology of machine tool or engine control 
units, is connected to a data bus 3 which is connected to 
the diagnostic unit or apparatus 2. The PC 1 controls^ 
for example, operation of a machine tool by providing 
sequencing output signals thereto, as schematically indi- 
cated by output line la The machine tool includes one 
or more transducers T which provide output signals 
over connecting lines or cabling lb to the stored pro- 
gram operating unit, for example travel of a milling 
cutter or the like. 

The diagnostic apparatus 2 may be part of the stored 
program unit I, or can be attached thereto as a separate 
module thereof by connection thereto on a specific 
appropriate connecting point, or connection terminal of 
the data bus 3. The diagnostic unit 2 can be used to 
monitor a plurality of PC's lA, IB ... IN, as shown 
schematically by the broken-line bus 3a and the broken- 
line operating unit lA. Such other operating units may 
be used, for example, to control other functions in the 
machine tool M, or supervise other machine tools, not 
separately shown. 

FIG. 2 illustrates the diagnostic unit in detail. It in- 
cludes a fixed or read-only memory (ROM) 4. Addition- 
ally, it includes a random access memory (RAM) 5. The 
ROM 4 and the RAM 5 are connected over a data bus 
9 with a microprocessor 8. A suitable microprocessor 8 
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is the element 8751 made by INTEL, or 8751 made by Input signals El. 2 and E1.2 are connected to the 
Siemens. An indicator 6 is connected to the micro- inputs of an AND-gate 18. the output of which is con- 
processor 8, for example by a branch of the daia bus 9, nected to one input of a further AND-gaie 19. The 
in order to provide an alphanumeric output representa- second input to the AND-gate 19 is connected to a 
live of a particular type of error. The number 888 is 5 signal A3.1. This signal A3.1 is the output signal of a 
shown, which, in accordance with a decoding table, preceding step. The output of the AN[>gate 19 is con- 
may indicate a specific type of fault malfunction or nected to the SET input S of a flip-flop (FF) 20. The 
error interfering with proper program execution by the output of the FF20 is connected to the output A3.2, 
programmable controller 1, for example arising within which, for example, may be connected by line Ibpto the 
the machine tool M, one or more of the transducers T, '0 winding of an electro-hydraulic, or electro-pneumatic 
or the cabling and connecting lines la, lb, respectively. valve V (FIG. 1) including transducer Ty. FF 20 is reset 

An input/output (I/O) port 7 is further connected to by the output signal A3.3, connected to the RESET 

a branch of the data bus 9. The output signal from the input R thereof. The output A3 J — in accordance with 

I/O port 7 is connected to the data bus 3 (FIG. I) and the preceding defmition that a subsequent step resets the 

to the PC 1, * ^ preceding one — is the output of the subsequent step. 

In accordance with a feature of the invention, it is not FIG. 4b illustrates a software implementation, of the 
necessary to include an application-speciHc diagnostic hard-wired circuit shown in FIG. 4<z, for a programma- 
program within the diagnostic unit 2. The only essential ble controller. The step illustrated is a single step, such 
feature is the adherence of the application program's as, for example, step 13 of FIG. 3. 
structure to the program structures standard in the pro- The left column shows the memory address at which 
grammable controller field, which are described, for the respective instruction is stored in the memory of the 
example, in Deutsche (German) Industrial Norm (Stan- programmable controller. The column "Operator" 
dard) DIN 40 719, part 6, TTie diagnostic routines are characterizes the command which is applied; the col- 
stored in the form of firmware within the ROM 4 and umn "operand" determines which input or output is to 
are not specific to a particular type of stored program, be switched. 

or to a specific problem. The I/O port 7 permits sensing Memory address 0(K)9, with command RA, stores and 

of the programming sequence or structure of the stored controls resetting of the output of the preceding step, 

program operating unit in the diagnostic apparatus for example— and referring to FIG. 3— the step 12. Sec 

8— see connection of I/O pon 7 to the data bus 3. ^ input A3.1, FIG. 3. This reset condition (RA) of the 

FIG. 3 illustrates an example of the execution se- preceding step is shown at 22 in FIG. 4. illustration b. 

quence of a stored program. Sequencing controls, nec- The signals which permit continuation of steps or 

essarily, have a stepwise cycling, from one step to an- sequencing of the cycle from one step to the subsequent 

other, controlled by switching or stepping networks, or next step are stored in memory address 0010 and 0011, 

programs. The smallest functional unit of the program 3^ and are schematically illustrated at 23 in FIG. 4, illustra- 

of sequencing controls is one sequencing step, also de- tion b. The operator and the operand determine that the 

noted as a short step. The sequencing control of FIO, 3 inputs 1.1 and 1.2 are logically joined by an AND-ele- 

is built up of the steps 12 to 16. ment, as determined by the operator UE. In the memory 

The first two steps 12, 13 follow sequentially. There- address 0012, the output of the preceding step 3.1 is 

after, branching to parallel steps 14, 15 results. The last ^ monitored. As discussed above, continued processing of 

step is step 16. The entire sequencing control with steps steps is dependent on events which had occurred in the 

12 to 16 is termed a sequencing chain, or a sequencing past. Continued processing, thus, is dependent on the 

run. It is a specific characteristic of a sequencing run condition that a prior step has been carried out and, as 

that the subsequent step being carried out resets the a condition of subsequent steps, the carrying out of the 
preceding one. The time required for coursing through 45 prior step is necessary, and the signal 3.1 is a prepara- 

the entire sequencing run is defined as one control cy- tory signal to carry out the subsequent step. It is logi- 

cle. cally conjoined by the AND element 19 with the step 

Customarily, each step is associated with an clement conditions set forth at 23 by operator UA. The cbnjunc- 
characteristic of the specific step, for example a mem- tion at block 23 with the prior result is necessary since, 
ory element, or memory address, together with the 50 in a course or run of the sequence, further signal pro- 
necessary network arrangements in order to carry out cessing in a step, in accordance with a program, can 
the object of the program. Sequential stepping, or con- occur only when the previously called-for step has been 
tinned execution of the subsequent steps, in accordance processed. The memory address 0013 stores the SET 
with the program, then is carried out in dependence on output A3. 2, for example by energizing the valve V. 
the further sequential program conditions. Such further 55 This is carried out by the SET status 25. Setting of the 
sequential program conditions may be determined by SET status 25 can occur only, however, if the prior 
the process, manufacturing steps or the tike to be con- cycling conditions 23 and 24 have been carried out, or 
trolled, or may be dependent on time, or on external have been met. 

parameters, e.g. temperature. The output 3.2 remains SET until the output 3.3 of 
FIG. 4 illustrates an example of a sequencing step. 60 the subsequent instruction is enabled by placement in 
FIG. 4, in illustration a, shows the electrical network SET status. At that lime, the output 3.2 must be immedi- 
interconncction which must be constructed by hard- ately RESET. The RESET command 26 is stored in 
ware. For example, inputs El.l and E1.2have transduc- memory addresses 0014 and 0015, and causes resetting 
crs connected thereto, eg. a position transducer, a tim- of the output 3.2 — operator RA — as soon as the output 
ing element, an output unit providing a specific time 65 3.3 of the subsequent step is SET, as indicated by opera- 
marker signal, or the like. The conditions of the two tor UA, which, of course, corresponds to the same 
signals applied to the inputs El.l and El. 2 then deter- operator as in step 24. The reset command of the output 
mine the condition for further signal processing. 3 J, operator RA, is structured in the same way as the 
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reset command RA of 22. of which only the last instruc- 
tion is shown- 

Further steps in the cycle are arranged in a similar 
manner, as is apparent. 

Let it be assumed that the programmable controller 1 3 
has a sequencing cycle stored therein. The diagnostic 
unit must have the structure of the sequencing steps 
applied thereto. Preferably, and in accordance with a 
feature of the invention, this step structure is abstracted 
by the diagnostic unit itself. The diagnostic unit in 10 
accordance with a feature of the invention, utilizes the 
feature of the program that the structure of all steps is 
similar, or has similar sequential features and, in general, 
includes prerequisite conditions for continued execution 
and the setting and resetting of results or outputs of a 15 
step. The step structure can be input into the diagnostic 
unit by the author of the program for the programmable 
controller, or. preferably, it is possible with appropri- 
ately equipped diagnostic units to have the diagnostic 
unit itself abstract the step structure. Determination of 20 
the step structure is only necessary when a new pro- 
gram is to be read into the PC 1. 

FIG. 5 is a flowchart with which abstracting of the 
stepping structure will be explained. The method to 
generate the stepping structure is independent of the 25 
application program type and, therefore, can be used 
for any program which is read into the programmable 
controller. A program which implements this method, 
thus, can be placed into the ROM 4 of the diagnostic 
unit 2 (sec FIG. 2). - 30 

The diagnostic device 2 recalls over the I/O port 7 
the contents of each one of the occupied memory ad- 
dresses N in the programmable controller, see block 28, 
FIG. S. The operator stored at the respective address is 
analyzed. If the operator is a SET command — for exam- 35 
pie the operator at the memory address 0013 — then 
RAM 5 will store at memory location A the actual 
memory address, the operator, and the operand; this is 
illustrated by blocks 30 and 31 in FIG. 5. After storage 
of this command line in the RAM 5 of the diagnostic 40 
unit 2, or, if no SET command was sensed, the address 
is incremented— see block 32--and, assuming that the 
program is not at an end — block 33 — a loop is formed to 
again analyze the operator at the next memory address 
N+1. « 

The fact that a SET command has been issued is a 
necessary condition, but not a sufficient one, for pres- 
ence of a step in the sequential program. In a second 
cycle, thus, the memory addresses N within the RAM 5 
are recalled once more— see block 34 — and the address 50 
in advance of the SET command in the PC 1 is check- 
ed—see block 35. The diagnostic device then checks the 
operand and the operator with that address at 35. If the 
memory address N which was orginally recalled — 
block 28— was address 0013. then, now, the memory 55 
address 0012 is analyzed with respect to the operator 
and the operand. If the operator is an AND command, 
and if the operator is stored somewhere in the RAM 5, 
then the subsequent command must be a SET com- 
mand, which is characteristic for a step. In this connec- 60 
tion, it will be recalled that in the steps of a sequential 
cycle, or a run, any step is prepared by a preceding step, 
so that, upon conjunction with the next step, the state of 
the preceding step must be tested or checked. In the 
example shown in illustration b of FIG. 4, the test is 65 
simple since the operand 3.1 is also the operand of the 
preceding step. Programming control loops, however, 
and branches may be included in the overall program, 



so that the operand may be a variable which refers to a 
different output. If no AND command is present, and if 
the operand is not stored in some way or another in the 
RAM 5— see block 31 — then the subsequent SET com- 
mand is not a command which initiates a new step, but, 
rather, may be a terminating command, for example a 
command to provide an indication. Such commands are 
not indicative of a step in the stepping structure or 
pattern. These commands, thus, are therefore erased 
from the RAM 5— see block 38. FIG. 5. The next ad- 
dress in the RAM 5 then is interrogated, see step 39. 

In this manner, the previously stored data in the 
RAM— see block 31— are tested and checked once 
more to determine if the required prerequisite condi- 
tions for these commands are stored in the RAM 5. 

When all the memory locations in the RAM 5 have 
been checked or tested, then the actual stepping struc- 
ture of the stored program is stored within the diagnos- 
tic unit 2. In the example shown in FIG. 3, memory 
addresses for five steps are occupied in the RAM 5. In 
the example according to FIG. 4, sec illustration b, line 
25 is stored at the address 0013. 

Diagnostic tests can be carried out at regular inter- 
vals. Malfunctions, faults and errors occur, however, 
only comparatively rarely, and it is not necessary, or 
suitable, to make such regularly recurring tests. It is 
desirable, and preferred, to initiate an automatic diagno- 
sis only if a predetermined time is exceeded for the 
run-through of a program run, or cycle. The diagnostic 
device, then, under control of a timing means set, for 
example, to test the time taken for a normal or entire 
program run, provides a switching signal to the diag- 
nostic unit when the time is exceeded; the diagnostic 
device then interrupts over to the data bus and— see 
FIG. 6— interrogates the respective memory addresses 
from the RAM 5 of the diagnostic unit. 

Referring to FIG. 6, which schematically shows rec- 
ognition of malfunction, fault or error: In step 41, the 
memory address N of the RAM 5 is read-out. In a subse- 
quent step, the status of the operand in that programma- 
ble controller (PC) memory address is tested or ana- 
lyzed. The status of a memory address is the state in 
which the operand of the specific or respective memory 
address then appears. This may, either, be a ZERO or a 
ONE. If the corresponding memory address in the PC is 
SET, then a logic- 1 signal is generated; if the memory 
address is RESET, then a logic-0 signal is generated. In 
the test block 43, the status of the operand is checked. If 
the status indicates SET, then the step is in order, since 
the further condidons for continued execution at this 
step have been met. A further testing or checking is not 
necessary, and the next memory address from the RAM 
5 can be recalled. 

If the state, however, is NOT SET (or RESET), then 
a fault in the conditions for continued execution may be 
present. Indicative of such a fault is the contents of the 
location preceding the read-out adress, see step 44, in 
which the address N is decremented by one, since that 
address N - 1 was the address which provided the sig- 
nal necessary for the preparation of the next step, in this 
case the step N. This address, however, consists of an 
AND-command and an operand, which refers to a pre- 
ceding step since, otherwise, the instruction would have 
been erased— compare FIG. 5, blocks 37, 38. Thus, if. 
upon testing, it was found that the memory address 0013 
was NOT SET, then it must be determined if the condi- 
tions for the step of address 0012 have been proper and 
have been provided. If this address is NOT SET, that is. 
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if it has a O-signat or status, then this means that the step further data» for example leading to instructions for 
which preceded that step has not yet run through, or repair, and further to simplify troubleshooting and pro- 
had already been run through and terminated. Thus, the vide directly readable output for simplification of ser- 
next or subsequent step cannot be set. vice or maintenance work. 

The search process, then, is terminated, and the next 5 The method, the steps of which are especially ill us- 
memory address N is recalled from the RAM (block trated in RG. 6, permits checking and monitoring not 
41). only of straight runs, but also on runs having branched 

If the preparation for the step has been SET, then this cycles, loops, and jump commands. Checking of 
means that some other conditions required for contin- prerequisite conditions for continued execution is car- 
ued execution beyond this step have not been fulfilled 10 tied out backwardly, that is, from the SET address of 
since, otherwise, a SET command would have been the execution step in which the fault occurred. It is, 
presented. It is then necessary to investigate the further thus, also possible to determine prerequisites for con tin- 
processing instructions 23 (FIG. 4). To do so, the mem- ued execution which are pointed to by a jump com- 
ory address is decremented by one. After the memory mand, or to which, at any point of the program of the 
address 0012, the memory 0011 is interrogated — see 15 PC 1, reference is to an intermediate result stored, for 
block 46, FIG. 6. The status of this memory address is example, at a specific memory address, and which is 
then determined in dependence on operator and oper- necessary for logical conjunction with a further step, 
and. If. as in the example of FIG. 4, an AND-conjunc- Consequently, the steps need not be stored in the 
tion is present, then the status of this memory address programmable controller in the sequence of their exccu- 
also must be a ONE. Since, however, it is also possible 20 tion, but rather, it is possible, by means of markers, to 
that "NOT** or "NOT OR" relationships are possible, it refer to other program subroutines, 
is also possible that the reverse status is correct. This, The diagnostic program can be substantially simpli- 
however, can be determined from the operator. If the fied if the run in the PC is serially constructed, that is, if 
status is correct— see block 4fi— FIG. 6, then the next the program of the programmable controller 1 is so 
higher address is searched. If the status is incorrect, it 23 arranged that each step of the run is programmed in the 
means that at that memory address the further execu- sequence in which it is to be carried out. If that is the 
tion conditions have not been met Considering the case, another feature of the step structure can be uti- 
example of FIG. 4, illustration b, it means that at the lized, which is explained best in reference to the exam- 
memory address 0011, the input 1.2 operates fiaultily. pie in FIG. 4, specifically illustration b. 
This is indicated by the indicator 6, also shown at block 30 If the runs of a program use sequential steps, which 
49, FIG. 6. The operator now knows that the input 1.2 are sequentially programmed, then, and as illustrated in 
is defective, for example due to a break in a connecting FIG. 4, step 13 follows step 12; step 15 follows step 13. 
line. Ibr, short circuit, or a defective transducer, and, by This means that, sequentially, the outputs or results 
means of a simple diagnostic table, can correlate the A3. 1, A3 .2 and A3.3 will be SET. Since only one output 
output 888 with a specific transducer Tr (FIG. 1) or 35 at a time may be SET, and this output is cancelled only 
cabling, etc. connected thereto. Thus, the fault has been when the continued sequencing conditions for the next 
found which might have lead to shut-down of the ma- output have been fulfilled, the test program must only 
chine, engine, or other device. determine in which address stored in the RAM 5 the 

Usually, for a step to be carried out not only one, but status ONE is entered. The step subsequent to the step 
a plurality of conditions, must be satisfied. In a further 40 which has the ONE stored therein must be erroneous 
step, see block 50, FIG. 6. the memory address is incre- since, due to the fault, the conditions at the preceding 
men ted by one, in order to test the next execution condi- step for continued execution cannot be obtained, since 
tion. In the example of FIG. 4, the condition is stored at the preceding step could not be RESET. As an exam- 
address 0010. Before such a test Is carried out. however, pie: Let it be assumed that the output A3. 2 in the ad- 
a further step is used to check if, possibly, a "terminate*' 45 dress 0013 (FIG. 4— illustration b) is SET. RESET of 
command was present. the output A3.2 cannot be commanded by a command 

A terminate command may be present if the operator, in the memory address 0015 if the output A3.3 cannot 
for example, is a SET command, a RESET, or a com- be SET. A condition for further execution is missing, 
mand to go to a specific memory location. In FIG, 4, The diagnostic apparatus 2 can recognize that the status 
illustration b, this is the case in memory address 0009. 50 of the memory address 0013 is a ONE and can immedi- 
The reset command RA resets the output or result 3.1. ately switch to the next memory address of the step 
A test for a terminate command thus will be negative. If which is stored in the RAM 5. TTie conditions for this 
so. the loop is exited. If, however, a further execution next step are then tested. 

condition is to be tested, then the loop is run through This method permits substantia] simplification and 
once more, in which the status of the execution condi- S5 thus acceleration of testing of the sequencing of the 
tions is tested in dependence on op>erator and operand. steps by the diagnostic apparatus. This permits the diag- 
If a terminate command is present, the next address is nosis to be carried out more rapidly, and programs 
recalled from the RAM 5 and, then, all further execu- necessary for the testing, which may be required, can be 
tion conditions within the run are tested. substantially simplified, so that the memory capacity of 

Based on the data which are displayed on the indica- 60 the ROM 4 can be held to a lower level. Further, the 
tor 49, the operator can readily determine the faults counter search requirements, illustrated in FIG. 6, can 
which may be present and, sequentially, remove all of be stored together with the analysis of the stepping or 
the malfunction or error sources. Usually, only a single sequencing structure in the ROM 4 of the diagnostic 
fault may be indicated. apparatus. 

The data bus may have data display units connected 65 The diagnostic apparatus, thus, permits checking if 
thereto, or different types of indicators which may, sequential steps to be carried out by the machine tool M, 
inherently, decode the output indication here shown for as signaled to the PC by the transducers T, are prop- 
only as an alphanumerical output in order to provide erly being carried out and controlled by proper se- 
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quencing. If any one of the signals for the next subsc* 
quent steps should be missing, or should be incorrect — 
for example due to malfunction of a transducer, a cable 
break, a short circuit erroneously introducing a ONE 
where a ZERO should be present, or the like, which 5 
would interfere with the execution, the diagnostic appa- 
ratus can readily determine not only the fact that a fault 
occuned but exactly where the fault occurred. Of 
course, it is possible to monitor the particular transduc- 
ers and their connecting lines individually. The present 
method, however, permits carrying out such monitor- 
ing by a program which utilizes the characteristic of a 
sequential stored program for operating units, such as 
machine tools, engines and other devices that, for any 
step to be carried out, a preceding step must have a 
clearance signal applied thereto as a necessary condi- 
tion for the subsequent step. Searching for the last 
stored correct step, then, will likewise provide an indi- 
cation that the source of trouble is in connection with 
the following one. 

Various changes and modifications may be made 
within the scope of the inventive concept. 

The output indication can be controlled by a counter 
which, for example, is arranged to provide a display of 23 
counted steps. The specific step in the program which is 
stored in the programmable controller, and which con- 
trols the machine tool, or device M, can readily related 
operating steps required therein with particular ele- 
ments within the device M, for example the valve V, the 30 
operation of which is reported to the stored program 
operating unit by the transducer Tv over the line Iby. 

Wc claim: 

1. In the combination of a programmable controller 
(1) and a device (M), particularly a machine tool, con- 35 
trolled thereby, in which: 
said controlled device (M) includes operating ele- 
incnts (V) selectively controlled by the program- 
mable controller, and transducers (T) and control 
lines connected to, and signaling operating condi- ^ 
tions of. the device (M) to the programmable con- 
troller (1); 

said programmable controller (1) issues commands to 
said operating elements, based upon a set of pro- 
gram instructions stored at memory locations or 
addresses within said controller; 

said program comprises a sequence of program steps, 
each of which can be initiated only upon occur- 
rence of a RESET status at the end of any preccd- ^ 
ing step; 

certain of said program instructions comprise SET 
commands and certain of said program instructions 
comprise AND commands; 

a diagnostic unit (2). including a random-access mem- 
ory (RAM), is connected to the programmable 
controller (1); and 

a malfunction output indicator (6, 49) is provided, 
controlled by the diagnostic unit and indicating 
malfunction, and the nature of the malfunction, in ^ 
the run of a program in which the programmable 
controller (1) controls sequential operating steps or 
conditions of said controlled device. 

a method of recognizing errors in the execution of the 
• program steps, and hence of the control signals 63 
applied by the programmable controller (1) to the 
controlled device (M). 

comprising the steps of 
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loading sequentially into said diagnostic unit (2) con- 
secutive instructions of the stored program within 
the programmable controller (1) 
analyzing each instruction to determine whether it 
contains a SET command and, if so, storing the 
instruction in the RAM of the diagnostic unit; 
loading sequentially into said diagnostic unit (2) the 
instruction, of the stored program within the pro- 
grammable controller (1), adjacent to and preced- 
ing each SET-command-containing instruction; 
analyzing said preceding instruction to determine 
whether it contains an AND operator and, if not, 
erasing said adjacent SET-command-containing 
instruction from the RAM of the diagnostic unit as 
not being indicative of a program step; 
upon the lapse of more than a predetermined period 
of time for execution of a predetermined ponion of 
the program, searching for the last program step 
which terminated in a RESET status, then deter- 
mining which of several necessary conditions for 
the completion of the next succeeding step was not 
satisfied; 

and, providing an output indication on the malfunc- 
tion output indicator (6. 49) indicating the source of 
each signal which did not satisfy the necessary 
condition for completion of the next succeeding 
step. 

2. Method according to claim 1, further including the 
step of determining if the time for a complete cycle of 
sequenced steps (FIG. 3: 12-16) provided by the pro- 
grammable controller (1) to said device (M) is within, or 
without, a predetermined time limit; 

and initiating said interrogation step by the diagnostic 
stage of the predetermined time limit is exceeded. 

3. Method according to claim 1, including the step of 
recalling, sequentially, the steps of the stored pro- 
gram in the programmable controller (1) and stor- 
ing, in one of said memories (4, 5), all the addresses 
which include a SET command; 

and, in a subsequent test cycle, erasing the addresses 
of those SET commands which are not preceded 
by an AND-command, 

4. A self-diagnosing automated system for carrying 
out the method of claim 1, said system comprising the 
combination of a programmable controller (1). a diag- 
nostic unit (2), and a device (M), particularly a machine 
tool, connected to and controlled by a program stored 
within the programmable controller in which the con- 
trolled device (M) includes operating elements (V) se- 
lectively controlled by the programmable controller 
(1). transducers (T), and connecting lines (lb) con- 
nected to, and signaling operating conditions of. the 
device (M) to the programmable controller (1); 

wherein said diagnostic unit (2) is connected to the 
programmable controller (1) and includes a mal- 
function or fault output indicator (6, 49). and 

wherein, in accordance with the invention, the diag- 
nostic unit (2) comprises 

a processing element (8) including a timing means; 
a fixed memory (ROM 4) and a random access 
memory (5); 

at least one internal diagnostic unit data bus (9) 
interconnecting said processing element (8). said 
memories (4.5), and said malfunction indicator 
(6, 49), 

and a data bus (3) connecting the processing ele- 
ment with said programmable controller (1), 
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said fixed memory (4) storing, therein, diagnostic 
routines which direct said diagnostic unit (2) in 
carrying out said steps of loading from said pro- 
grammable controller the instructions stored 
therein, analyzing the instructions to determine the ^ 
step structure of the particular program stored in 
said programmable controller* and determining 
whether and which necessary conditions for com- 
pletion of successive steps of the stored program 
have been satisfied. 

said random access memory (5) storing, therein, those 
instructions from the program stored in said pro- 
grammable controller which are indicative or char- 
acteristic of a step; jj 

said timing means providing to said diagnostic rou- 
tines an indication of whether execution by said 
programmable controller of said stored program 
has taken more than said predetermined period of 
lime; 20 

said processing element (8), executing instructions of 
said diagnostic routines, interrogating the pro- 
grammable controller (1) to determine at which 
step of the execution, by said programmable con- 
troller, of said program stored therein, the predc- 
termined period of time was exceeded and the 
source of the signal which did not satisfy said nec- 
essary condition, and providing an output indica- 
tion of malfunction or fault location on said output 
indicator (6, 49). 
5. The combination of claim 4, further including 
an input/output port (7) connecting the processing 
element (8) to the dau bus (3) to provide for recall 
and storage, in accordance with the diagnostic 35 
routines within the fixed memory (ROM 4). of the 
step structure of the program stored in the pro- 
grammable controller. 



6. The system of claim 4, wherein said processing 
element is a microprocessor. 

7. The system of claim 6. wherein said microproces- 
sor is an Intel 8751. 

8. The combination of a programmable controller (1), 
a diagnostic unit (2), a data bus (3) interconnecting said 
controller and diagnostic unit, a device (M) controlled 
by the programmable controller, and transducers fT) 
and input lines (lb) connected to. and signaling operat- 
ing conditions of, the device (M) to the programmable 
controller (1) 

wherein, in accordance with the invention, 
the programmable controller includes a memory stor- 
ing a particular application program therein; 
the diagnostic unit (2) includes a microprocessor (8), 
a random-access memory (4), a read-only memory 
(5), and an interconnecting daU bus (9); and diag- 
nostic routines are stored in said read-only memory 
(5), said routines including: 
means for recognising each time that a new appli- 
cations program is read into said programmable 
controller, abstracting the step structure of said 
applications program, and recording said ab- 
stract in said random-access memory (5); 
means for determining whether execution by said 
programmable controller of said applications 
program has taken more than a predetermined 
period of time; 
means for determining which instruction of said 
applications program was in progress when said 
predetermined period of time was exceeded; 
means for determining from which of said trans- 
ducers signals were necessary for execution of 
said instruction in progress, and which of said 
necessary signals were missing; 
and mtans for generating a code identifying which 
input line failed to provide said missing signal. 
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